jeremyshapiro

Products

ProductCVEsExploitedLatest
FuseDesk3–Mar 21, 2026
Next Date1–May 12, 2026

Exploited and recent CVEs

  • CVE-2026-4920 Medium 6.4 Next Date <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'default' Shortcode Attribute 0.2%
  • CVE-2026-1914 Medium 6.4 FuseDesk <= 6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'emailtext' Shortcode Attribute 0.2%
  • CVE-2025-3832 Medium 6.4 FuseDesk <= 6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via successredirect Parameter 0.3%
  • CVE-2024-13459 Medium 6.4 FuseDesk <= 6.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%